Application Security Engineer

About the role

We are looking for an Application Security Engineer to join a high‑impact security engineering team in Germany. You will work at the intersection of software development and cybersecurity, helping to protect large‑scale cloud‑native applications that power next‑generation AI infrastructure.

Key responsibilities

• Identify, analyze, and remediate application security vulnerabilities using modern ASPM tools.
• Build, maintain, and enhance ASPM rules and automation across engineering teams.
• Integrate security best practices into the SDLC in close collaboration with development and platform teams.
• Conduct manual and automated penetration testing on applications and supporting infrastructure.
• Lead threat‑modeling sessions and risk assessments for new and existing applications.
• Develop, maintain, and promote secure coding standards and guidelines.
• Act as a subject‑matter expert, providing guidance to internal teams.
• Stay up‑to‑date with emerging threats, vulnerabilities, and mitigation strategies.

Required profile

• Minimum 4 years of experience in application security, secure software development, or related cybersecurity engineering roles.
• Strong understanding of application security risks, including the OWASP Top 10.
• Hands‑on experience with secure coding practices in languages such as Python, Go, Java, or JavaScript.
• Practical experience with security testing tools (e.g., Burp Suite, OWASP ZAP, Semgrep).
• Experience conducting threat‑modeling exercises and security risk assessments.

Required skills

• Python
• Go
• Java
• JavaScript
• Burp Suite
• OWASP ZAP
• Semgrep
• Application Security Posture Management (ASPM) tools
• Threat modeling
• Secure coding standards